This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier:          nBob1KoFWtyY5LuM2HK12U5fbgT9z/Q0MhBEtBKFD6Q=
Subject key identifier:   61:B3:31:AE:CD:10:17:EB:09:DA:BF:6E:DE:D2:E7:0A:58:8D:01:36
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       019C42B40185D302E493A66224752CA348AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:18 +0000
Files and hashes:         1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: GWLrN1m8aKFX2fa1TrAE8hc/GG8BACOMzu0lKmAIbYY=)
                          2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:01:85:d3:02:e4:93:a6:62:24:75:2c:a3:48:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: Feb  9 14:00:18 2026 GMT
            Not After : Feb 10 14:00:18 2026 GMT
        Subject: CN=61b331aecd1017eb09dabf6eded2e70a588d0136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:44:3a:71:3a:4f:4f:55:a0:ca:db:c1:e7:
                    63:20:e1:7b:4b:6a:82:70:68:38:bb:ca:fd:f5:6d:
                    2b:28:b9:4b:e1:d6:63:c7:6f:c5:d5:31:ca:99:fc:
                    35:f3:c3:64:eb:ae:6f:11:1a:57:d7:f7:d5:ea:f4:
                    1c:d6:65:92:66:30:be:e3:3d:fa:49:f1:63:dd:a4:
                    10:a0:40:2b:56:d0:9a:2d:a6:81:32:da:ea:6d:e5:
                    20:bf:38:17:da:0e:01:9e:7e:db:92:f2:9e:57:b8:
                    41:f4:56:5c:ab:17:50:9b:c3:9b:d2:41:0e:98:5f:
                    72:dd:a8:33:2e:91:65:84:77:4f:a9:09:d1:14:ac:
                    79:75:d9:ea:1b:7e:b6:1c:67:6f:b9:68:a5:68:e8:
                    dc:52:02:fb:be:c8:e7:8a:39:8e:c3:43:fc:1c:d2:
                    93:bd:96:68:97:4a:bb:8b:7d:8b:13:d0:c0:dc:75:
                    e5:bc:2d:ad:25:ff:c8:97:46:44:d7:12:62:fa:4a:
                    bf:d3:2d:b8:46:72:41:f8:49:e5:f4:37:32:f5:db:
                    87:e1:49:95:71:ba:7c:d9:dc:cd:ee:9e:93:fe:0c:
                    fd:7d:12:b6:02:08:da:7a:f2:50:88:7f:6a:5c:02:
                    d9:5d:4a:1b:0a:f3:77:de:8d:29:5b:d0:18:e4:17:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B3:31:AE:CD:10:17:EB:09:DA:BF:6E:DE:D2:E7:0A:58:8D:01:36
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:11:6f:ab:e6:60:4e:01:0f:bd:38:2f:0e:fd:d3:73:ea:f3:
         4b:02:4b:26:ae:18:a1:3b:e4:f2:9d:b9:c9:50:66:f5:5e:c2:
         d1:77:18:be:69:12:de:9d:db:08:61:cc:20:df:b5:07:e0:0e:
         1d:26:5b:48:67:8f:18:81:76:cf:80:69:54:e5:58:05:2e:eb:
         bb:75:0f:16:65:8f:d1:a1:77:5b:47:78:4a:b8:a4:ce:8b:43:
         95:72:30:bf:bf:fb:1a:bd:b5:e0:fa:57:82:2d:31:0f:b1:1b:
         a4:8f:b7:d3:91:92:e7:dd:13:82:5c:c9:bf:5d:22:ca:9d:09:
         e6:d7:5a:31:d9:2d:10:bb:b0:ad:cf:d7:0e:ee:6c:13:3c:2a:
         c8:e1:e0:19:0e:36:ca:d6:18:0f:3f:05:59:d6:cd:93:98:af:
         87:2f:19:a8:f4:31:c6:db:ff:da:f3:8d:b2:8b:e9:e6:c8:a3:
         d6:84:43:71:d3:d6:90:78:01:fc:05:65:40:32:59:73:e0:2b:
         50:02:9c:a1:00:ee:0a:f6:7d:63:8a:e4:16:5f:e4:e8:12:8d:
         21:60:09:40:58:08:e5:c7:bc:31:17:00:37:b4:fb:79:52:77:
         34:bb:66:a4:ec:79:8c:b5:43:56:30:47:4b:f0:6a:9b:1a:f3:
         06:ac:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:23 2026 by rpki-client